Version 3.7.0

Update minio to 2023-07-21T21-12-44Z
Version 3.6.3
2025-09-04 00:05:18 +00:00 · 2023-07-22 08:23:40 +05:30 · 2023-07-22 07:43:24 +05:30 · 2023-07-19 08:32:46 +05:30 · 2023-07-19 08:08:43 +05:30 · 2023-07-12 09:05:00 +05:30
15 changed files with 2980 additions and 571 deletions
--- a/940
+++ b/940
@@ -976,3 +976,943 @@ Improve replication performance. See (#12080, #12054, #12009) for more details.
 * Update minio to 2021-05-20T22-31-44Z
 * [Full changelog](https://github.com/minio/minio/releases/tag/RELEASE.2021-05-20T22-31-44Z)

+[1.164.2]
+* Update minio to 2021-05-22T02-34-39Z
+* [Full changelog](https://github.com/minio/minio/releases/tag/RELEASE.2021-05-22T02-34-39Z)
+
+[1.164.3]
+* Update minio to 2021-05-27T22-06-31Z
+* [Full changelog](https://github.com/minio/minio/releases/tag/RELEASE.2021-05-27T22-06-31Z)
+
+[1.164.4]
+* Update minio to 2021-06-07T21-40-51Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2021-06-07T21-40-51Z)
+
+[1.164.5]
+* Update minio to 2021-06-14T01-29-23Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2021-06-14T01-29-23Z)
+
+[1.165.0]
+* Update minio to 2021-06-17T00-10-46Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2021-06-17T00-10-46Z)
+
+[1.165.1]
+* Update minio to 2021-07-08T01-15-01Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2021-07-08T01-15-01Z)
+
+[1.166.0]
+* Update minio to 2021-07-22T05-23-32Z
+* Use new minio dashboard 2021-06-13T17-48-22Z
+
+[1.167.0]
+* Update minio to 2021-09-15T04-54-25Z
+* Update minio dashboard to 2021-09-02T09-21-27Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2021-09-15T04-54-25Z)
+* SSE-KMS support was not working with copyObject() refer #13206
+* Support UserInfo claims refer #12469
+
+[2.0.0]
+* **This is a major update. The changes below are required for the app to work. The newer version of the app has 2 domain names - one for the console (browser UI) and one of the API domain (API/S3 requests). **
+  * Be sure to take a backup before updating the app.
+  * Once updated, go to the `Location` view and set the API Domain.
+  * Update the various apps/servers/code to use the API domain as the backup destination.
+
+[2.1.0]
+* Update minio to 2022-01-28T02-28-16Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-01-28T02-28-16Z)
+* make sure to pass groups for all credentials while verifying policies by @harshavardhana in #14193
+* do not expect 'speedtest' to be a bucket by @harshavardhana in #14199
+* Optimize read locker cleanup by @klauspost in #14200
+* Ensure that AssumeRole calls are sent to Audit log by @donatello in #14202
+
+[2.2.0]
+* Update minio to 2022-02-05T04-40-59Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-02-05T04-40-59Z)
+
+[2.2.1]
+* Update minio to 2022-02-07T08-17-33Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-02-07T08-17-33Z)
+
+[2.3.0]
+* Update minio to 2022-02-18T01-50-10Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-02-18T01-50-10Z)
+
+[2.3.1]
+* Update minio to 2022-02-24T22-12-01Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-02-24T22-12-01Z)
+
+[2.3.2]
+* Update minio to 2022-02-26T02-54-46Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-02-26T02-54-46Z)
+
+[2.3.3]
+* Update minio to 2022-03-05T06-32-39Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-03-05T06-32-39Z)
+
+[2.3.4]
+* Update minio to 2022-03-08T22-28-51Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-03-08T22-28-51Z)
+
+[2.4.0]
+* Update minio to 2022-03-11T11-08-23Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-03-11T11-08-23Z)
+
+[2.4.1]
+* Update minio to 2022-03-11T23-57-45Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-03-11T23-57-45Z)
+* add filesystem group change policy for large minio deployments by @dharapvj in #14528
+* Fix regression from range GET proxying #14345 by @poornas in #14532
+
+[2.4.2]
+* Update minio to 2022-03-14T18-25-24Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-03-14T18-25-24Z)
+
+[2.4.3]
+* Update minio to 2022-03-17T06-34-49Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-03-17T06-34-49Z)
+
+[2.4.4]
+* Update minio to 2022-03-22T02-05-10Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-03-22T02-05-10Z)
+
+[2.4.5]
+* Update minio to 2022-03-24T00-43-44Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-03-24T00-43-44Z)
+
+[2.4.6]
+* Update minio to 2022-03-26T06-49-28Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-03-26T06-49-28Z)
+
+[2.4.7]
+* Update minio to 2022-04-01T03-41-39Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-04-01T03-41-39Z)
+* Always get the actual object size in bulk SSE-S3 by @vadmeste in #14637
+* listing: decrypt only SSE-S3 single-part ETags by @aead in #14638
+* Load IAM with a single listing call by @donatello in #14640
+* fix: multiple pool setup return incorrect DeleteMarker metadata by @harshavardhana in #14642
+* Quick type for fix ttfb entry in table by @eco-minio in #14647
+
+[2.4.8]
+* Update minio to 2022-04-09T15-09-52Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-04-09T15-09-52Z)
+* Add metrics for observing IAM sync operations by @donatello in #14680
+* Write deployment id to health report at the start by @anjalshireesh in #14673
+* etag: add Format and Decrypt functions by @aead in #14659
+* Remove unnecessary log printing by @vadmeste in #14685
+* listing: improve listing of encrypted objects by @aead in #14667
+* Set inspect-input.txt modtime by @klauspost in #14688
+
+[2.4.9]
+* Update minio to 2022-04-12T06-55-35Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-04-12T06-55-35Z)
+* Fix a privilege escalation security issue - https://github.com/minio/minio/security/advisories/GHSA-2j69-jjmg-534q
+* Console v0.15.10 by @dvaldivia in #14723
+* align atomic variables once more for 32bit by @harshavardhana in #14721
+* make sure to pass Lifecycle if set for List filtering by @harshavardhana in #14722
+* Set permissions for GitHub actions by @naveensrinivasan in #14693
+* Add support for minio tier type by @krisis in #14468
+
+[2.4.10]
+* Update minio to 2022-04-16T04-26-02Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-04-16T04-26-02Z)
+* Allow parallel decom migration threads to be more than erasure sets by @krishnasrinivas in #14733
+* Include speedtest as part of healthinfo api by @anjalshireesh in #14696
+* Support templating accessKey existingSecret and bucket name by @yisiqi in #14643
+* enable go1.18.x builds by @harshavardhana in #14746
+* [S3Select] Switch to new parquet library and reduce locking by @donatello in #14731
+* Update Console v0.15.13 by @dvaldivia in #14751
+
+[2.4.11]
+* Update minio to 2022-04-26T01-20-24Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-04-26T01-20-24Z)
+
+[2.4.12]
+* Update minio to 2022-04-29T01-27-09Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-04-29T01-27-09Z)
+
+[2.4.13]
+* Update minio to 2022-05-03T20-36-08Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-05-03T20-36-08Z)
+* fix: panic in browser redirect handler for unexpected r.Host by @harshavardhana in #14844
+* fix: reject invalid r.Host headers by @harshavardhana in #14846
+* fix: disallow newer policies, users & groups with space characters by @harshavardhana in #14845
+* Check error status codes by @klauspost in #14850
+* Log Range Header by @klauspost in #14851
+* fix: remove embedded-policy as requested by the user by @harshavardhana in #14847
+
+[2.4.14]
+* Update minio to 2022-05-04T07-45-27Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-05-04T07-45-27Z)
+* Add audit log for decommissioning
+
+[2.5.0]
+* Update minio to 2022-05-08T23-50-31Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-05-08T23-50-31Z)
+* Fix missing annotations for PVCs by @Sea-you in #14793
+* Add OPA doc and remove deprecation marking by @donatello in #14863
+* avoid concurrent reads and writes to opts.UserDefined by @harshavardhana in #14862
+
+[2.5.1]
+* Update minio to 2022-05-19T18-20-59Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-05-19T18-20-59Z)
+* pools: GetObjectNInfo should cover locking during object read by @vadmeste in #14887
+* tracing: Add disk path to storage tracing by @vadmeste in #14883
+* Add support for Access Management Plugin by @donatello in #14875
+* If decom of an object fails, retry for 3 times by @krishnasrinivas in #14861
+* update new name for MINIO_POLICY_OPA_URL by @itsericqiu in #14898
+* add support for extra Prometheus labels by @harshavardhana in #14899
+* use BadRequest HTTP status instead of Conflict for certain errors by @harshavardhana in #14900
+
+[2.5.2]
+* Update minio to 2022-05-23T18-45-11Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-05-23T18-45-11Z)
+* mrf: Fix stale MRF data showed in heal info by @vadmeste in #14953
+* Relax site replication syncing of service accounts by @poornas in #14955
+* Fix WalkDir fallback hot loop by @klauspost in #14961
+* fetch bucket replication stats across peers in single call by @harshavardhana in #14956
+
+[2.5.3]
+* Update minio to 2022-05-26T05-48-41Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-05-26T05-48-41Z)
+* replication healing: Fix typo when healing bucket quota info by @vadmeste in #14966
+* Do not use inline data size in xl.meta quorum calculation by @vadmeste in #14831
+* hash-set: Add file input for debug tool by @klauspost in #14965
+* site replication: Allow replication rule edit by @poornas in #14969
+* fix: copyObject on versioned bucket when updating metadata by @harshavardhana in #14971
+
+[2.6.0]
+* Update minio to 2022-06-02T02-11-04Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-06-02T02-11-04Z)
+* feat: Single drive XL implementation
+
+[2.7.0]
+* Update minio to 2022-06-07T00-33-41Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-06-07T00-33-41Z)
+
+[2.7.1]
+* Update minio to 2022-06-07T00-33-41Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-06-07T00-33-41Z)
+* do not print errors upon 'nil' err (06/06/22) (Minio Trusted)
+
+[2.7.2]
+* Update minio to 2022-06-10T16-59-15Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-06-10T16-59-15Z)
+* Include the entirety of vendor folder in .gitignore by @kaankabalak in #15046
+* relax O_DIRECT in single drive mode if unsupported by @harshavardhana in #15045
+* Bump Console v0.18.1 by @dvaldivia in #15051
+* healthcheck cluster endpoint should honor write/readQuorum per pool by @harshavardhana in #15053
+* fix: make metrics endpoint responsive by reducing the chatter by @harshavardhana in #15055
+
+[2.7.3]
+* Update minio to 2022-06-11T19-55-32Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-06-11T19-55-32Z)
+* debug: verify diff on latest objects on source and target buckets by @harshavardhana in #15069
+* fix: add missing minio_s3_requests_total by @harshavardhana in #15070
+* Update dperf to 0.4.1 by @vadmeste in #15071
+* sts: Avoid printing all STS errors by @vadmeste in #15065
+
+[2.7.4]
+* Update minio to 2022-06-17T02-00-35Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-06-17T02-00-35Z)
+* debug: Close object after check by @vadmeste in #15077
+* kms: initialize after cli parsing by @vadmeste in #15076
+* Support configuration of a session policy file by @rgcostea in #15078
+* erasure-sd: Evaluate versioning Prefix in multi-delete objects by @vadmeste in #15081
+* fix: simplify healthcheck code to freeze calls only once by @harshavardhana in #15082
+* add bucket level S3 received/sent bytes by @harshavardhana in #15084
+* fix: background local test also via channel by @harshavardhana in #15086
+* add dataErrs for healing debug log by @harshavardhana in #15092
+
+[2.7.5]
+* Update minio to 2022-06-20T23-13-45Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-06-20T23-13-45Z)
+* Update gopsutil to v3.22.5 by @danieljakots in #15098
+* fix: ignore printing io.EOF during WalkDir() on concurrently modified objects by @harshavardhana in #15100
+* Avoid CompleteMultipart freeze with unexpected network issue by @vadmeste in #15102
+* Add generic function to retrieve config value with metadata by @donatello in #15083
+* fix typo in site replication version healing by @poornas in #15103
+* Add import/export APIs to migrate bucket metadata by @poornas in #14929
+
+[2.7.6]
+* Update minio to 2022-06-25T15-50-16Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-06-25T15-50-16Z)
+* remove gateway banner and some other TODO loggers by @harshavardhana in #15125
+* s3-verify: Fix endpoint and missing comparison by @vadmeste in #15129
+* Parallelize new disks healing of different erasure sets by @vadmeste in #15112
+* fips: simplify TLS configuration by @aead in #15127
+* fix: cant parse comment without '=' in environment file by @anoworl in #15130
+* add go1.18 specific curve preferences by @harshavardhana in #15132
+
+[2.7.7]
+* Update minio to 2022-06-30T20-58-09Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-06-30T20-58-09Z)
+* Supports parity configuration of '0', '1' enabling support for 2,3 drive setups for erasure coding.
+* add license banner for GNU AGPLv3 by @harshavardhana in #15178
+* save MinIO version with each version (8-bytes extra) by @harshavardhana in #15170
+* Remove unnecessary code in WalkDir() by @vadmeste in #15168
+* perform object sweep after equeue the latest CopyObject() by @harshavardhana in #15183
+* Upgrade reedsolomon/compression packages by @klauspost in #15182
+* Revert proxying requests with precondition errors by @vadmeste in #15180
+* allow support for parity '0', '1' enabling support for 2,3 drive setups by @harshavardhana in #15171
+* handle missing funcNames for handlers by @harshavardhana in #15188
+* update banner to reflect the final agreed UI by @harshavardhana in #15192
+* site healing: Skip stale bucket metadata updates from peer by @poornas in #15186
+* de-couple caller context to avoid internal races by @harshavardhana in #15195
+* Save minio version in xl.meta while healing in outdated disks by @vadmeste in #15181
+* finalize startup-banner and remove unnecessary logs by @harshavardhana in #15202
+* Make ReqInfo concurrency safe by @klauspost in #15204
+* update banner with version+runtime by @harshavardhana in #15206
+
+[2.8.0]
+* Update minio to 2022-07-04T21-02-54Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-07-04T21-02-54Z)
+* Simplify Prometheus metrics gather by @harshavardhana in #15210
+* site healing: Skip stale iam asset updates from peer. by @poornas in #15203
+* return appropriate error under 'decom status' by @harshavardhana in #15213
+* do not print errFileNotFound in entries.resolve() by @harshavardhana in #15216
+* decom IAM, Bucket metadata properly by @harshavardhana in #15220
+
+[2.8.1]
+* Update minio to 2022-07-06T20-29-49Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-07-06T20-29-49Z)
+* Major scanner metrics overhaul now you can watch scanner metrics in realtime using mc admin top scanner #15161
+* Multiple external IDP management simplification #15152
+* Decommission now supports mutations such as delete, update of metadata on objects from an active decom pool.
+
+[2.8.2]
+* Update minio to 2022-07-13T23-29-44Z
+* Update mc to 2022-07-11T16-16-12Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-07-13T23-29-44Z)
+* Adding error check for jetstream connection by @rayjanoka in #15252
+* Fix Helm chart does not support special characters in access/secret key by @dormanze in #15243
+* do not recreate deprecated delete-journal.bin, only read it by @harshavardhana in #15185
+* remove auto-port warning for console-address by @harshavardhana in #15260
+* Allow compaction at bucket top level. by @klauspost in #15266
+* fix grammatic errors and minor rewrites by @daniel-bogusz95 in #15264
+* Purge the objects immediately when x-minio-force-delete header is passed in DeleteObject and DeleteBucket API by @Praveenrajmani in #15148
+* metric: add KMS-related metrics by @aead in #15258
+* site replication: Ignore missing targets/replication config during re… by @poornas in #15269
+* Add compressed file index by @klauspost in #15247
+* Add 4K minimum compressed size by @klauspost in #15273
+* Do not print erasure read log when a disk becomes offline by @vadmeste in #15277
+* allow custom speedtest bucket by @harshavardhana in #15271
+* fix: simplify passing auditLog eventType by @harshavardhana in #15278
+* Avoid listing buckets from a suspended pool by @vadmeste in #15283
+* preserve incoming query params in success_action_redirect by @harshavardhana in #15280
+* Upgrade compression package by @klauspost in #15284
+* Add padding to compressed+encrypted files by @klauspost in #15282
+* resync: Avoid concurrent access/write on map by @poornas in #15286
+* Add a github workflow test for root disk detection by @vadmeste in #15267
+* Fix tier-add help by @krisis in https://github.com/minio/mc/pull/4148
+* add mc ping command by @sinhaashish in https://github.com/minio/mc/pull/4074
+
+[2.8.3]
+* Update minio to 2022-07-15T03-44-22Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-07-15T03-44-22Z)
+* correct RefreshCall & UnlockCall of DefaultTimeouts by @shichanglin5 in #15288
+* listing: Expire object versions past expiry by @krisis in #15287
+* Updating minio-go by @cniackz in #15297
+* Fix site replication healing of missing buckets by @poornas in #15298
+
+[2.8.4]
+* Update minio to 2022-07-17T15-43-14Z
+* Update mc to 2022-07-17T15-43-14Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-07-17T15-43-14Z)
+* add reconnect duration allows for verifying disconnect intervals by @harshavardhana in #15306
+* copy query values before update to preserve the expected keys by @harshavardhana in #15310
+* support 'admin update' for hotfix versions by @harshavardhana in #15308
+* allow decommission to continue when healing by @harshavardhana in #15312
+* Allow topologySpreadConstraints configuration by @justusbunsi in #14684
+* Fix failure in createUser used by make-user-job helm chart by @lamida in #15293
+* add annotations to ServiceMonitor by @sathieu in #15020
+* Fix data race, which caused tests execution to fail by @shichanglin5 in #15313
+* Exclude upload-ids with incomplete part upload in multipart listing by @vadmeste in #15318
+* support encrypted/compressed objects properly during decommission by @harshavardhana in #15320
+* Add decommission compression+encryption enabled tests by @harshavardhana in #15322
+* Move mc admin top scanner -> mc admin scanner info (#4151)
+
+[2.8.5]
+* Update minio to 2022-07-24T17-09-31Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-07-24T17-09-31Z)
+* fix: fork os.MkdirAll to optimize cases where parent exists by @harshavardhana in #15379
+* Add compression scheme to header by @klauspost in #15395
+
+[2.8.6]
+* Update minio to 2022-07-26T00-53-03Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-07-26T00-53-03Z)
+
+[2.8.7]
+* Update minio to 2022-07-30T05-21-40Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-07-30T05-21-40Z)
+
+[2.8.8]
+* Update minio to 2022-08-02T23-59-16Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-08-02T23-59-16Z)
+* target: Set 20000 as maximum parallel target notif calls by @vadmeste in #15435
+* fix: resetting a config with a non default target name by @vadmeste in #15448
+* fix: allow P-384/P-512 constant time implementation by @harshavardhana in #15445
+* modify user secret volumes mount path name by @dormanze in #15443
+* fix: instrument os.OpenFile differently for Reads and Writes by @harshavardhana in #15449
+
+[2.8.9]
+* Update minio to 2022-08-05T23-27-09Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-08-05T23-27-09Z)
+
+[2.8.10]
+* Update minio to 2022-08-08T18-34-09Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-08-08T18-34-09Z)
+
+[2.8.11]
+* Update minio to 2022-08-11T04-37-28Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-08-11T04-37-28Z)
+
+[2.8.12]
+* Update minio to 2022-08-13T21-54-44Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-08-13T21-54-44Z)
+
+[2.9.0]
+* Update minio to 2022-08-22T23-53-06Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-08-22T23-53-06Z)
+* Versioning now supports Idempotent delete markers #15521
+* Disk IO statistics is now available as real-time monitoring via mc #15512
+* Replication now more accurately tracks failed replication events #15556
+
+[2.9.1]
+* Update minio to 2022-08-25T07-17-05Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-08-25T07-17-05Z)
+
+[2.9.2]
+* Update minio to 2022-09-01T23-53-36Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-09-01T23-53-36Z)
+* improve performance for inlined data by @harshavardhana in #15603
+* site replication: Avoid returning root svcacct info in sr metadata by @poornas in #15608
+* Add extended checksum by @klauspost in #15433
+* audit-log: Add time to get object from remote-tier by @krisis in #15602
+* Avoid messages from go test output by @vadmeste in #15601
+* chore: remove duplicate word in comments by @Abirdcfly in #15607
+* feat: Add healing trace by @klauspost in #15616
+* Encrypt checksums by @klauspost in #15620
+* fix: add healing metric type for heal tracing by @harshavardhana in #15631
+
+[2.9.3]
+* Update minio to 2022-09-07T22-25-02Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-09-07T22-25-02Z)
+* avoid printing io.ErrUnexpectedEOF for .metacache objects by @harshavardhana in #15642
+* do not print object not found errors in MRF healing by @harshavardhana in #15646
+* fis deadlock caused by unlocking a non-existing lock by @yudoutingle in #15635
+* fix: use optimized json.NewEncoder instead for metrics by @harshavardhana in #15648
+* Reuse madmin.ClusterRegistrationInfo by @anjalshireesh in #15654
+* verify RenameData() versions to be consistent by @harshavardhana in #15649
+* allow non-standards fallback for Expires header by @harshavardhana in #15655
+* allow non-standards fallback for all http.TimeFormats by @harshavardhana in #15662
+
+[2.9.4]
+* Update minio to 2022-09-17T00-09-45Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-09-17T00-09-45Z)
+* limit number of buckets to 500k by @harshavardhana in #15668
+* Add StopDiskAtLimit by @klauspost in #15670
+* add vulncheck action to CI by @aead in #15676
+* Persist in-memory replication stats to disk by @poornas in #15594
+* prometheus: Track errors during REST read/write calls by @vadmeste in #15678
+* Fix S3 Select CSV -> JSON with variable field count by @klauspost in #15677
+* use go1.19.1 for vulncheck by @harshavardhana in #15680
+* Pass groups claim into condition values by @donatello in #15679
+* panic if replication config could not be read from disk by @poornas in #15685
+* update docs to add cycle in scanner by @sinhaashish in #15686
+* Fix flaky TestGetObjectWithOutdatedDisks by @klauspost in #15687
+* When listing, do not count delete markers by @klauspost in #15689
+
+[2.9.5]
+* Update minio to 2022-09-22T18-57-27Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-09-22T18-57-27Z)
+* nable cross compile for openbsd/amd64 by @harshavardhana in #15701
+* Implement KMS methods for keys, policies and identities by @reivaj05 in #15673
+* Remove deprecated io/ioutil by @klauspost in #15707
+* helm: specify service account for the jobs by @cowjen01 in #15706
+* site replication: clear config if remove --all specified by @poornas in #15716
+* Fix cancellation leaks by @jiuker in #15721
+
+[2.9.6]
+* Update minio to 2022-09-25T15-44-53Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-09-25T15-44-53Z)
+* fix: parse and save retainUntilDate in correct time format by @harshavardhana in #15741
+* validate correct ETag for the parts sent during CompleteMultipart by @harshavardhana in #15751
+* Relax retention date enforcement on replication target by @poornas in #15752
+* Add auto configuration of replication workers by @poornas in #15636
+* remove unused package internal/smart by @harshavardhana in #15758
+
+[2.9.7]
+* Update minio to 2022-10-02T19-29-29Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-10-02T19-29-29Z)
+* Add RPC tcp timeout/errs and avg duration to prometheus by @vadmeste in #15747
+* fix: generalize SC config and also skip healing sub-sys under SD by @harshavardhana in #15757
+* Quick initialized of bucket target notifications by @vadmeste in #15571
+* support tagging based policy conditions by @harshavardhana in #15763
+* Update links to documentation site by @djwfyi in #15750
+* Fix Audit kafka configuration loading by @vadmeste in #15766
+* Fix race when accessing REST tcp dial values by @vadmeste in #15770
+* Re-load config after reset by @anjalshireesh in #15771
+* fix: de-duplicate conflicting object names on namespace by @harshavardhana in #15772
+
+[2.9.8]
+* Update minio to 2022-10-05T14-58-27Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-10-05T14-58-27Z)
+
+[2.9.9]
+* Update minio to 2022-10-08T20-11-00Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-10-08T20-11-00Z)
+* set bucket creation timestamp properly for legacy FS backend by @harshavardhana in #15800
+* decom: Ignore object/version error during deletion by @vadmeste in #15806
+* remove build asset caching by @harshavardhana in #15807
+* Fix GetObjectRetention to parse in iso8601 time format by @poornas in #15809
+* Update pkg to v1.4.5 by @reivaj05 in #15808
+* remove unused debug param from evalActionFromLifecycle by @harshavardhana in #15813
+
+[2.9.10]
+* Update minio to 2022-10-15T19-57-03Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-10-15T19-57-03Z)
+* Add missing server info fields by @klauspost in #15826
+* indicate how long it took to bring the drive online by @harshavardhana in #15835
+* honor specified target prefix under batch replication by @harshavardhana in #15834
+* remove spurious logging for object not found by @harshavardhana in #15842
+* Add metrics, version and apis handlers by @reivaj05 in #15839
+
+[2.9.11]
+* Update minio to 2022-10-20T00-55-09Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-10-20T00-55-09Z)
+* do not assume invalid buf to be non-xl.meta by @harshavardhana in #15843
+* convert context.DeadlineExceed to offline disk in DiskInfo() by @vadmeste in #15886
+* remove nancy, we rely on vulncheck from now on by @harshavardhana in #15893
+* do not need to trace ignored objects by @harshavardhana in #15894
+* Add concurrent Snowball extraction + options by @klauspost in #15836
+* storage: Return errDiskNotFound when a peer is during shutdown by @vadmeste in #15868
+
+[2.9.12]
+* Update minio to 2022-10-21T22-37-48Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-10-21T22-37-48Z)
+* Do not freeze s3 traffic in healthinfo api by @anjalshireesh in #15912
+* lifecycle: Fix rules filtering by @vadmeste in #15914
+* Pass encrypted etag as is for immediate tiering by @krisis in #15925
+* Set CONSOLE_MINIO_SERVER to 127.0.0.1 by default by @vadmeste in #15887
+* Fix deletemarker replication check properly by @poornas in #15923
+* Check for s3zip content offset by @klauspost in #15924
+
+[2.9.13]
+* Update minio to 2022-10-24T18-35-07Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-10-24T18-35-07Z)
+* Fix Prometheus Probe tlsConfig, doesn't belong in ProberSpec by @briend in #15739
+* Audit dangling object removal by @vadmeste in #15933
+
+[2.10.0]
+* Update minio to 2022-10-29T06-21-33Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-10-29T06-21-33Z)
+* First release to support rebalancing two or more pooled setups to even out disk usage refer #15483
+* Removes remaining gateway implementations of NAS/S3 and legacy FS mode completely - refer #15929.
+* Existing users should continue to use their current releases if they wish to continue using gateway mode.
+* Subscribed customers get downstream support until they are subscribed as per the terms of the subscription.
+* Other miscellaneous fixes in Site Replication, Multipart Checksums and SUBNET registration.
+
+[3.0.0]
+* **IMPORTANT: This release removes the fs backend completely and this upgrade will fail if you are using the fs backend. Please read and understand [this forum post](https://forum.cloudron.io/topic/7967/minio-package-3-x) to determine what backend you are using before upgrading. If your minio uses the fs backend and you upgrade without a backup, all data can be lost.**
+* Update minio to 2022-10-29T06-21-33Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-10-29T06-21-33Z)
+* First release to support rebalancing two or more pooled setups to even out disk usage refer #15483
+* Removes remaining gateway implementations of NAS/S3 and legacy FS mode completely - refer #15929.
+
+[3.0.1]
+* Update minio to 2022-11-10T18-20-21Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-11-10T18-20-21Z)
+* rebalance status must return appropriate error initially by @harshavardhana in #16022
+* remove io/util for advanced golang by @yanggangtony in #16011
+* Use the same lock for the scanner and site replication healing by @vadmeste in #15985
+* Remove some logs caused by external apps by @vadmeste in #16027
+* remove printing map() checksums by @harshavardhana in #16028
+
+[3.0.2]
+* Update minio to 2022-11-11T03-44-20Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-11-11T03-44-20Z)
+* fix: parsing multipart uploadID under site replicated setup by @poornas in #16048
+* netPerfRX Reset() should use write Lock() @jiuker in #16043
+
+[3.1.0]
+* Update minio to 2022-11-17T23-20-09Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-11-17T23-20-09Z)
+* save deploymentID to avoid mutating request entry in Audit by @jiuker in #16053
+* configuring the nats target to reconnect forever by @rayjanoka in #16050
+* helm: fix positional parameter in template by @yanggangtony in #15983
+* improve server startup error when pools are incorrect by @harshavardhana in #16056
+* choose default values upon incorrect storage_class value by @harshavardhana in #16058
+
+[3.2.0]
+* Update minio to 2022-11-26T22-43-32Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-11-26T22-43-32Z)
+* Optimizations in Multipart code-path in multi-pool setups, via #16086
+* Fixes a regression in server side replication due to ETag mismatch issue under specific type of MinIO setups, fixed via #16129
+
+[3.3.0]
+* Update minio to 2022-11-29T23-40-49Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-11-29T23-40-49Z)
+* avoid serializing decryptKey() every 15mins by @harshavardhana in #16135
+* kms: fix possible deadlock due to nested RLock calls. by @aead in #16136
+* Improvements in logger and audit webhooks by @anjalshireesh in #16102
+
+[3.3.1]
+* Update minio to 2022-12-02T19-19-22Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-12-02T19-19-22Z)
+* update reedsolomon v1.11.3 by @harshavardhana in #16149
+* re-order the top-level config keys for priority by @harshavardhana in #16150
+* repl: resync orchestrator to use global shared lock by @vadmeste in #16154
+
+[3.3.2]
+* Update minio to 2022-12-07T00-56-37Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-12-07T00-56-37Z)
+* fix: in disk cache readCacheFileStream should closed upon return by @jiuker in #16138
+* Start PR on Enterprise when there is new MinIO Version by @cniackz in #16121
+* kms: add support for KES enclaves by @aead in #16139
+* fix: update the JSON keys for latest 'mc' release by @harshavardhana in #16171
+
+[3.3.3]
+* Update minio to 2022-12-12T19-27-27Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2022-12-12T19-27-27Z)
+* remove unnecessary logs for truncated XML inputs by @harshavardhana in #16184
+* Encrypt checksums with KMS on CompleteMultipartUpload by @klauspost in #16177
+* feat: Encrypt s3zip file index by @klauspost in #16179
+* reuse sha256 in config GetSettings by @jiuker in #16188
+* Add version id to healresult by @klauspost in #16193
+* Replace filepathx with fork by @klauspost in #16192
+* fix: translate tier add errors properly by @harshavardhana in #16191
+* remove hard limit for number of buckets by @harshavardhana in #16194
+* fix: delete marker discrepancies via DeleteObject() API by @harshavardhana in #16195
+* Add IAM API to attach/detach policies for LDAP by @donatello in #16182
+* avoid double deletes() when no more versions by @harshavardhana in #16206
+* do not rename multipart failed transactions back to tmp by @harshavardhana in #16204
+* Use different subnet public key during dev/test by @anjalshireesh in #16216
+* fix: iso8601TimeFormat padding issue for certain nanoseconds by @harshavardhana in #16207
+* Add LDAP DNS SRV record lookup support by @donatello in #16201
+
+[3.4.0]
+* Update minio to 2023-01-02T09-40-09Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-01-02T09-40-09Z)
+* Rebalancing pools correctly choose object sizes to calculate the final distribution #16240
+* Startup improvements to support WAN-based distributed MinIO setups #16259
+* Add HTTP2-only support for external policy plugin #16225
+* Locks are now spread across different pools based on object affinity #16312
+
+[3.4.1]
+* Update minio to 2023-01-06T18-11-18Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-01-06T18-11-18Z)
+* vectorize cluster-wide calls such as bucket operations by @harshavardhana in #16313
+* update klauspost/compress dependency by @harshavardhana in #16343
+* update replication tests with latest 'mc' by @harshavardhana in #16348
+* converge listBuckets() as a peer call by @harshavardhana in #16346
+* remove unnecessary kernel-tuning docs by @harshavardhana in #16354
+
+[3.4.2]
+* Update minio to 2023-01-12T02-06-16Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-01-12T02-06-16Z)
+* xl: Quit early when EC config is not correct by @vadmeste in #16390
+* Add comment field to service accounts by @vadmeste in #16380
+* fix: allow bind on ipv6 loopback failures by @allanrogerr in #16388
+* fix: error out if an object is found after a full decom by @vadmeste in #16277
+* Update console to 0.22.5 by @donatello in #16400
+
+[3.4.3]
+* Update minio to 2023-01-18T04-36-38Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-01-18T04-36-38Z)
+* Simplify/speedup container image publishing script by @donatello in #16403
+* Remove checks target from docker target by @dvaldivia in #16399
+* metrics: Add more logs when unable to read bucket usage by @vadmeste in #16405
+* fix: calculate common parity properly by @harshavardhana in #16406
+* Avoid dangling deletes if disk not found by @poornas in #16401
+
+[3.4.4]
+* Update minio to 2023-01-20T02-05-44Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-01-20T02-05-44Z)
+* Signal stop-rebalance to all rebalancing pools by @krisis in #16438
+* Use async healing in PutObject call by @vadmeste in #16431
+* add a way to avoid blocking queueHealTask() depending on caller by @harshavardhana in #16433
+* Fix bandwidth monitoring to be per remote target by @poornas in #16360
+
+[3.4.5]
+* Update minio to 2023-01-25T00-19-54Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-01-25T00-19-54Z)
+* fix: deleted object names for directory objects by @klauspost in #16448
+* grafana: Show one metric for the total data growth by @vadmeste in #16449
+* replication: Avoid logging PreConditionFailed error by @poornas in #16450
+
+[3.4.6]
+* Update minio to 2023-01-31T02-24-19Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-01-31T02-24-19Z)
+* Rename peer S3 prefix to avoid collision in the future by @vadmeste in #16473
+* Better error when setting up replication with a service account alias by @vadmeste in #16472
+* add x-amz-id-2 to indicate the node that received the request by @harshavardhana in #16474
+* fix: anonymize the x-amz-id-2 value from hostname by @harshavardhana in #16478
+
+[3.4.7]
+* Update minio to 2023-02-10T18-48-39Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-02-10T18-48-39Z)
+* Periodically refresh buckets metadata from the backend disks by @vadmeste in #16561
+* fix: aclHandlers convert XML parse error to relevant client error by @jiuker in #16587
+* fix: README.md in docs/config by @k0i in #16564
+* fix: username replacements for aws:username must use parentUser by @harshavardhana in #16591
+
+[3.4.8]
+* Update minio to 2023-02-17T17-52-43Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-02-17T17-52-43Z)
+* ServerInfo: return per erasure set information by @vadmeste in #16583
+* remove incorrect use of WaitGroup by @jiuker in #16596
+* fix: allow global leader lock context merge to be canceled by @vadmeste in #16603
+* Remove parentheses by @atalakey4work in #16605
+* Periodically remove stale buckets from in-memory by @harshavardhana in #16597
+
+[3.4.9]
+* Update minio to 2023-02-22T18-23-45Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-02-22T18-23-45Z)
+* avoid locks when unnecessary in SiteReplicationMetaInfo() by @harshavardhana in #16650
+* add missing x-amz-id-2 to event notification date by @harshavardhana in #16646
+* update dependencies to latest releases by @harshavardhana in #16651
+* fix: healing of replication config for endpoint changes by @poornas in #16648
+* Add detailed scanner trace output and notifications by @klauspost in #16668
+* Set meaningful message from minio with env variable KMS_SECRET_KEY by @allanrogerr in #16584
+
+[3.4.10]
+* Update minio to 2023-02-27T18-10-45Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-02-27T18-10-45Z)
+* event target registration failures must be returned by @harshavardhana in #16700
+* Remove bloom filter by @klauspost in #16682
+* Better error message when TLS certs do not have proper permissions by @vadmeste in #16703
+* Update OpenID doc with info on redirection params by @donatello in #16704
+* tests: Add test for S3 API error codes by @vadmeste in #16705
+
+[3.4.11]
+* Update minio to 2023-03-09T23-16-13Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-03-09T23-16-13Z)
+* Fix scanner deadlock on lost global lock by @klauspost in #16726
+* fix a data race in IAM loading by @poornas in #16742
+* Attach creds, owner and region to madmin calls by @dvaldivia in #16658
+* calculate disk cache usage percent accurately by @jiuker in #16740
+* upgrade all dependencies by @harshavardhana in #16753
+* return underlying error with BackendDown{} error by @jiuker in #16738
+* cleanup Go linter settings by @ferhatelmas in #16736
+* fix: handle syscall.EROFS also for osIsPermission() by @harshavardhana in #16765
+* return error if policy changes on disabled groups by @harshavardhana in #16766
+* feat: add lambda transformation functions target by @harshavardhana in #16507
+
+[3.4.12]
+* Update minio to 2023-03-13T19-46-17Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-03-13T19-46-17Z)
+* [Denial of access by an admin privileged user for root credential](https://github.com/minio/minio/security/advisories/GHSA-9wfv-wmf7-6753)
+* Add Object Version count histogram by @klauspost in #16739
+* fix: site-repl should heal STS with virtual parent by @donatello in #16792
+* chore: drop go versions in static analysis by @ferhatelmas in #16790
+
+[3.4.13]
+* Update minio to 2023-03-20T20-16-18Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-03-20T20-16-18Z)
+* Update audit log flow to use new headers with unit by @nitisht in #16797
+* restore rotating root credentials properly by @harshavardhana in #16812
+* remove unncessary logs from WalkDir(), PutObject() by @harshavardhana in #16818
+* update go dependencies by @harshavardhana in #16798
+* fix: return appropriate Location header for MakeBucket() by @harshavardhana in #16820
+* debug: new tool to reorder local erasure disks by @vadmeste in #16816
+
+[3.4.14]
+* Update minio to 2023-03-22T06-36-24Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-03-22T06-36-24Z)
+* check for quorum errors for DeleteBucket() by @harshavardhana in #16859
+* fix: tweak the maintenance=true to satisfy baremetal first by @harshavardhana in #16864
+* fix: add deadline conns and dnsCache for remote transports by @harshavardhana in #16865
+* Add lazy init of audit logger by @klauspost in #16842
+
+[3.4.15]
+* Update minio to 2023-03-24T21-41-23Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-03-24T21-41-23Z)
+* return quorum error instead of insufficient storage error by @vadmeste in #16874
+* add missing expiration information from 'sts info' by @harshavardhana in #16878
+* Revert query parameter src from diag upload if callhome enabled by @shtripat in #16881
+* Revert "Make localLocker lock attempts cancellable (#16510)" by @klauspost in #16884
+
+[3.4.16]
+* Update minio to 2023-04-07T05-28-58Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-04-07T05-28-58Z)
+* Set Console global Root CAs early to trust provided certs by @vadmeste in #16890
+* ignore operation timedout errors by @harshavardhana in #16891
+* fix: Avoid multiple write responses by @jiuker in #16894
+* fix: time.Parse RFC3339Nano by @jiuker in #16892
+* update all our deps by @harshavardhana in #16899
+* [testing] add mint runner test by @harshavardhana in #16868
+* fix: avoid logging when object/version not found in replication by @allanrogerr in #16919
+* fix: missing return after error response by @donatello in #16920
+* fix: put *msgp.Reader back in pool by @jiuker in #16927
+* fix: avoid out of slice index by @jiuker in #16925
+* allow more workers for ILM expiration by @harshavardhana in #16924
+
+[3.4.17]
+* Update minio to 2023-04-13T03-08-07Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-04-13T03-08-07Z)
+* add Err to Get getRemoteTargetClient. by @jiuker in #16982
+* trace: Fix func name of requests rejected by max clients by @vadmeste in #16977
+* chore: fix automatic issue handling from linter in ci by @ferhatelmas in #16969
+* Add used inodes to disk info by @vadmeste in #16994
+* Indicate RenameData is called by healObject by @krisis in #16997
+
+[3.4.18]
+* Update minio to 2023-04-20T17-56-55Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-04-20T17-56-55Z)
+* build: support loong64 by @wojiushixiaobai in #17027
+* fix: lambda function expiration when cred.Expiration is set by @klauspost in #17029
+* heal: avoid logging version not found by @poornas in #17031
+* Add part count to checksum by @klauspost in #17035
+* commonParity should pick readable FileInfo by @krisis in #17032
+* fix: Type of rejection for FIFO quota input by @jiuker in #17016
+* fix: DeleteBucketThrottle must delete ARN by @jiuker in #17034
+* implement support for FTP/SFTP server by @harshavardhana in #16952
+* Reduce allocations in Walkdir by @klauspost in #17036
+* Reformat helm chart templates by @dnskr in #16947
+
+[3.4.19]
+* Update minio to 2023-04-28T18-11-17Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-04-28T18-11-17Z)
+* fix: delete DNS upon success, update failure message by @harshavardhana in #17059
+* avoid attempting to migrate old configs by @harshavardhana in #17004
+* server-info: Return initializing state properly by @vadmeste in #17070
+* simplify sort.Sort by using sort.Slice by @harshavardhana in #17066
+* heal: Pick maximally occuring modTime in quorum by @krisis in #17071
+* fix: DeleteBucket for peers() must recreate bucket upon errors by @harshavardhana in #17079
+* fix: initialize reverse proxy forwarder with right public certs by @harshavardhana in #17080
+
+[3.4.20]
+* Update minio to RELEASE.2023-05-04T21-44-30Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-05-04T21-44-30Z)
+* allow root user to be disabled via config settings by @harshavardhana in #17089
+* fix: remove active healing on .minio.sys/ during startup by @harshavardhana in #17072
+* helm: align chart properties with naming convention by @dnskr in #17065
+* optimization use small blocks up to 64KB by @klauspost in #17107
+* Support systemd notify protocol by @WGH- in #17062
+* fix: store notification events immediately for persistent queues by @Praveenrajmani in #17112
+
+[3.5.0]
+* Update minio to 2023-05-18T00-05-36Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-05-18T00-05-36Z)
+* Signed trailers for signature v4 by @klauspost in #16484
+* add etc-path to post-job.yaml in helm chart by @mstein11 in #17148
+* helm: declare missing properties in values.yaml by @dnskr in #17153
+* Validate if replication config being added is self referential by @poornas in #17142
+* helm-chart: Use minio service account for post-deploy job if available by @LinAnt in #17077
+* put *msgp.Reader back to pool by @jiuker in #17156
+* add Err to BucketExists when NoSuchBucket by @jiuker in #17155
+
+[3.5.1]
+* Update minio to 2023-05-27T05-56-19Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-05-27T05-56-19Z)
+* fix: leaking connections in JSON SQL with limited return by @klauspost in #17239
+* before return make globalScannerMetrics.incTime call by @jiuker in #17230
+* fix: return proper error if OIDC Discoverydoc fails to respond by @jiuker in #17242
+* fix: increment counter when entry be skipped by @jiuker in #17237
+* Freeze the s3 APIs until the notification sub-system initializes completely by @Praveenrajmani in #17182
+* Add object parity in listing V2M and listing versions M by @vadmeste in #17238
+* allow specification of path/virtual style bucket lookup in batch replication by @poornas in #17201
+* fix: Avoid Income globalStats twice upon error by @jiuker in #17263
+
+[3.5.2]
+* Update minio to 2023-06-02T23-17-26Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-06-02T23-17-26Z)
+* fix: on windows use FindClose close handler by @jiuker in #17306
+* fix: cleanup empty multipart folders upon stale upload cleanup by @harshavardhana in #17312
+* Revert s3 select simdjson reuse by @klauspost in #17310
+* record err time when remote node is offline by @jiuker in #17262
+* fix: proxy not set on subnet logger webhook sometimes by @anjalshireesh in #17320
+* fix: time() returned function not being called as expected in globalSync() by @drivebyer in #17319
+* fix: fail large content in DeleteMultipleObjects() early by @jiuker in #17321
+
+[3.5.3]
+* Update minio to 2023-06-09T07-32-12Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-06-09T07-32-12Z)
+* fix: expMovingAvg is too small when startTime is zero by @jiuker in #17346
+* log: Add a log when saving pool.bin fails by @vadmeste in #17338
+* goroutines parser: Add --less flag to filter goroutines by @vadmeste in #17339
+* only allow decryption of etag for only sse-s3 by @harshavardhana in #17335
+* allow quota enforcement to rely on older values by @harshavardhana in #17351
+
+[3.5.4]
+* Update minio to 2023-06-16T02-41-06Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-06-16T02-41-06Z)
+* return InvalidRequest when no parts are provided by @harshavardhana in #17395
+* service accounts are allowed to have no expiration by @harshavardhana in #17397
+* return 204 status code for DeleteBucketTagging by @harshavardhana in #17400
+* listen: Only error out if not able to bind any interface by @vadmeste in #17353
+* fix: protect ReplicationStats against concurrent map iteration and write crash by @klauspost in #17403
+
+[3.5.5]
+* Update minio to 2023-06-19T19-52-50Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-06-19T19-52-50Z)
+* replication: Ensure metadata updates go to same pool where version ex… by @poornas in #17451
+* upgrade pkg and dperf to latest packages by @harshavardhana in #17448
+* fallback on etags if they match when mtime is not same by @harshavardhana in #17424
+* event args list for fanOut notification must be sized same by @harshavardhana in #17450
+* rebalance: Fix a integer divide by zero crash during state update by @vadmeste in #17455
+
+[3.5.6]
+* Update minio to 2023-06-23T20-26-00Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-06-23T20-26-00Z)
+* Bump up madmin-go and pkg deps by @donatello in #17469
+* safely ignore out of band deletions while decommissioning by @harshavardhana in #17473
+* fix: replication check for duplicate endpoints detection with wrong route by @jiuker in #17474
+* fix: do not crash rebalance code instead set the object layer by @harshavardhana in #17465
+* skip onlineDisks with parity mismatch by @harshavardhana in #17478
+* Add an option to make bucket notifications synchronous by @Praveenrajmani in #17406
+* always look for expired versions v/s remaining versions by @harshavardhana in #17479
+
+[3.6.0]
+* Update minio to 2023-06-29T05-12-28Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-06-29T05-12-28Z)
+* fix: do not listAndHeal() inline with PutObject() by @harshavardhana in #17499
+* Print certain log messages once per error by @kaankabalak in #17484
+* chore: pkg imported more than once by @testwill in #17444
+* update all our deps by @harshavardhana in #17497
+* Capture realtime metrics in health report by @anjalshireesh in #17516
+* allow site-replication checks to work on non-distributed setups by @harshavardhana in #17524
+* fix: bug in passing Versioned field set for getHealReplicationInfo() by @harshavardhana in #17498
+
+[3.6.1]
+* Update minio to 2023-07-07T07-13-57Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-07-07T07-13-57Z)
+* fix: OpenID config initialization by @donatello in #17544
+* fix: service account list for root user by @donatello in #17547
+* fix: for FTP server driver allow implicit trust TLS by @harshavardhana in #17541
+* s3: Fix a typo in per pool make/delete bucket errs calculation by @vadmeste in #17553
+* fix: honor older scanner settings only if newer has not changed by @harshavardhana in #17564
+* fix: upon DNS refresh() failure use previous values by @harshavardhana in #17561
+* fix: create user without policy that is required by @jiuker in #17554
+* fix: under FanOut API avoid repeated md5sum calculation by @harshavardhana in #17572
+
+[3.6.2]
+* Update minio to 2023-07-11T21-29-34Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-07-11T21-29-34Z)
+* add variadic delays in peer notification retries by @harshavardhana in #17592
+* Fix helm templating syntax in post-job by @aztechian in #17600
+* Avoid per request URL parsing by @klauspost in #17593
+* fix: set request ID in tracing context key by @donatello in #17602
+* prometheus: Fix internode stats by @vadmeste in #17594
+
+[3.6.3]
+* Update minio to 2023-07-18T17-49-40Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-07-18T17-49-40Z)
+* treat 0-byte objects to honor same quorum as delete marker by @harshavardhana in #17633
+* fix: do not os.Exit(1) while writing goroutines during shutdown by @harshavardhana in #17640
+* Corrected the API name for audit logging purpose by @shtripat in #17642
+* chore: fix minor issues reported via staticcheck by @testwill in #17639
+* Added endpoint and versions attributes to KMS details by @shtripat in #17350
+* replication: Simplify mrf requeueing and add backlog handler by @poornas in #17171
+* Use os.ReadFile instead of ioutil.ReadFile by @anjalshireesh in #17649
+
+[3.7.0]
+* Update minio to 2023-07-21T21-12-44Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-07-21T21-12-44Z)
+* pick internode interface properly via globalLocalNodeName by @harshavardhana in #17680
+* move bucket centric metrics to /minio/v2/metrics/bucket handlers by @harshavardhana in #17663
+* fix: byHost realTime metrics API by @jiuker in #17681
+* update grafana dashboard JSON with the new metrics by @harshavardhana in #17683
+* fix: retry listing in decommissioning if it fails perpetually by @harshavardhana in #17682
+* info: Report correct pool/set/disk indexes for offline disks by @vadmeste in #17695
+* Add deletemarker_total metric by @krisis in #17689
--- a/CloudronManifest.json
+++ b/CloudronManifest.json
@@ -5,23 +5,33 @@
  "description": "file://DESCRIPTION.md",
  "changelog": "file://CHANGELOG",
  "tagline": "Distributed object storage",
-  "version": "1.164.1",
+  "version": "3.7.0",
+  "upstreamVersion": "2023-07-21T21-12-44Z",
  "healthCheckPath": "/minio/login",
+  "memoryLimit": 805306368,
  "httpPort": 8000,
+  "httpPorts": {
+    "API_SERVER_DOMAIN": {
+      "title": "API Server Domain",
+      "description": "The domain name for MinIO (S3) API requests",
+      "containerPort": 9000,
+      "defaultValue": "minio-api"
+    }
+  },
  "addons": {
    "localstorage": {}
  },
  "manifestVersion": 2,
  "website": "http://www.minio.io",
-  "minBoxVersion": "5.3.0",
+  "minBoxVersion": "7.1.2",
  "forumUrl": "https://forum.cloudron.io/category/69/minio",
  "documentationUrl": "https://docs.cloudron.io/apps/minio/",
  "contactEmail": "support@cloudron.io",
  "icon": "logo.png",
  "tags": [ "storage", "hosting", "s3", "objectstore" ],
  "mediaLinks": [
-    "https://screenshots.cloudron.io/io.minio.cloudronapp/minio-browser-gateway.png",
-    "https://screenshots.cloudron.io/io.minio.cloudronapp/minio-browser.png"
+    "https://screenshots.cloudron.io/io.minio.cloudronapp/pic1.png",
+    "https://screenshots.cloudron.io/io.minio.cloudronapp/pic2.png"
  ],
  "postInstallMessage": "file://POSTINSTALL.md"
 }
--- a/DESCRIPTION.md
+++ b/DESCRIPTION.md
@@ -1,29 +1,29 @@
-This app packages Minio <upstream>2021-05-20T22-31-44Z</upstream>.
+## About

 Minio is a distributed object storage server built for cloud applications and devops.

-### Features
+## Features

-#### Amazon S3 Compatible
+### Amazon S3 Compatible

 Minio implements Amazon S3 v4 APIs. Minio also includes client SDKs and a console utility.

-#### Minimalist Design
+### Minimalist Design

 Minio is deeply influenced by minimalism. We believe that only simple things scale.

-#### Apache License 2.0
+### Apache License 2.0

 Minio is free software, released under Apache license v2.0. Minio has an active developer and user community.

-#### Lambda Functions
+### Lambda Functions

 Minio triggers Lambda functions through event notification service. In addition Minio also supports simple queueing service for AMQP, Elasticsearch, Redis, NATS and Postgres targets.

-#### Erasure Code & Bitrot Protection
+### Erasure Code & Bitrot Protection

 Minio protects data against hardware failures and silent data corruption using erasure code and checksums. You may lose half the number of drives and still recover from it.

-#### Written in Go
+### Written in Go

 Go is an emerging language of choice for modern cloud infrastructure projects. Go language enables Minio to be highly concurrent and lightweight.
--- a/20
+++ b/20
@@ -1,14 +1,16 @@
-FROM cloudron/base:3.0.0@sha256:455c70428723e3a823198c57472785437eb6eab082e79b3ff04ea584faf46e92
-
-ARG VERSION=RELEASE.2021-05-22T02-34-39Z
-
-RUN mkdir -p /app/code \
-    && wget https://dl.min.io/server/minio/release/linux-amd64/minio.${VERSION} -O /app/code/minio \
-    && chmod +x /app/code/minio
+FROM cloudron/base:4.0.0@sha256:31b195ed0662bdb06a6e8a5ddbedb6f191ce92e8bee04c03fb02dd4e9d0286df

+RUN mkdir -p /app/code
 WORKDIR /app/code

-ADD start.sh /app/code/start.sh
-ADD minio-credentials /app/code/minio-credentials
+ARG VERSION=RELEASE.2023-07-21T21-12-44Z
+
+# sometimes here https://dl.min.io/server/minio/release/linux-amd64/archive/
+# RUN wget https://dl.min.io/server/minio/release/linux-amd64/minio.${VERSION} -O /app/code/minio && chmod +x /app/code/minio
+RUN wget https://dl.min.io/server/minio/release/linux-amd64/archive/minio.${VERSION} -O /app/code/minio && chmod +x /app/code/minio
+# https://dl.min.io/client/mc/release/linux-amd64/
+RUN wget https://dl.min.io/client/mc/release/linux-amd64/mc -O /app/code/mc && chmod +x /app/code/mc
+
+COPY env.sh start.sh /app/code/

 CMD [ "/app/code/start.sh" ]
--- a/README.md
+++ b/README.md
@@ -34,3 +34,11 @@ npm install
 PATH=$PATH:node_modules/.bin mocha --bail test.js
 ```

+## Notes
+
+MinIO Console is an embedded web-based object browser built into MinIO Server
+
+## Multi-domain
+
+MINIO_DOMAIN=domain.com env var can be set to server DNS style requests as bucket.domain.com . This requires the platform code to set aliases for the httpPorts and not the primaryport.
+
--- a/env.sh
+++ b/env.sh
@@ -0,0 +1,9 @@
+# Add custom minio configuration to this file. Restart the app for changes to take effect.
+
+export CLOUDRON_MINIO_STARTUP_ARGS='server /app/data/data'
+
+# See https://docs.min.io/minio/baremetal/reference/minio-server/minio-server.html#envvar.MINIO_ROOT_USER
+# You can use pwgen -1s 64 to generate usernames and passwords
+export MINIO_ROOT_USER=minioadmin
+export MINIO_ROOT_PASSWORD=minioadmin
+
--- a/41
+++ b/41
@@ -1,41 +0,0 @@
-#!/usr/bin/env node
-
-'use strict';
-
-const fs = require('fs');
-
-const MINIO_CONFIG = '/app/data/data/.minio.sys/config/config.json';
-
-function usage() {
-    console.log('Usage:\n');
-    console.log('\tminio-credentials get');
-    console.log('\tminio-credentials set <access key> <secret key>');
-    console.log();
-}
-
-let config = JSON.parse(fs.readFileSync(MINIO_CONFIG, 'utf8'));
-let adminCredentials = config['credentials']['_'];
-let accessKey = adminCredentials.filter(kv => kv.key === 'access_key')[0];
-let secretKey = adminCredentials.filter(kv => kv.key === 'secret_key')[0];
-
-if (process.argv[2] === 'get') {
-    console.log('Access Key:', accessKey.value);
-    console.log('Secret Key:', secretKey.value);
-} else if (process.argv[2] === 'set') {
-    if (process.argv.length !== 5) return usage();
-
-    // https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateAccessKey.html
-    if (process.argv[4].length < 5) return console.log('secret key must be atleast 5 characters');
-    if (!/^[\w+=,.@-]+$/.test(process.argv[3])) return console.log('access key has invalid characters');
-
-    accessKey.value = process.argv[3];
-    if (process.argv[4].length < 8) return console.log('secret key must be atleast 8 characters');
-
-    secretKey.value = process.argv[4];
-
-    fs.writeFileSync(MINIO_CONFIG, JSON.stringify(config), 'utf8');
-    console.log('Credentials updated. Restart minio app for new credentials to take effect.\n');
-} else {
-    usage();
-}
-
--- a/screenshots/minio-browser-gateway.png
+++ b/screenshots/minio-browser-gateway.png
--- a/screenshots/minio-browser.png
+++ b/screenshots/minio-browser.png
--- a/screenshots/pic1.png
+++ b/screenshots/pic1.png
--- a/screenshots/pic2.png
+++ b/screenshots/pic2.png
--- a/start.sh
+++ b/start.sh
@@ -4,16 +4,23 @@ set -eu

 mkdir -p /app/data/data /run/minio/config /run/minio/certs

-# minio is used for backups at times and has a large number of files. optimize by checking if files
-# are actually in correct chown state
+[[ ! -f /app/data/env.sh ]] && cp /app/code/env.sh /app/data/env.sh
+source /app/data/env.sh
+
+# https://docs.min.io/minio/baremetal/reference/minio-server/minio-server.html#envvar.MINIO_SERVER_URL
+export MINIO_SERVER_URL="https://${API_SERVER_DOMAIN}"
+export MINIO_BROWSER_REDIRECT_URL="https://${CLOUDRON_APP_DOMAIN}"
+
+if [[ ! -d /app/data/mc_config ]]; then
+    mkdir -p /app/data/mc_config
+    /app/code/mc --config-dir /app/data/mc_config &> /dev/null || true
+fi
+
+# minio is used for backups at times and has a large number of files. optimize by checking if files are actually in correct chown state
 echo "==> Changing ownership"
 [[ $(stat --format '%U' /app/data/data) != "cloudron" ]] && chown -R cloudron:cloudron /app/data

-[[ ! -f /app/data/env.sh ]] && echo -e "# Add custom minio configuration to this file. Restart the app for changes to take effect.\n\nexport CLOUDRON_MINIO_STARTUP_ARGS='server /app/data/data'" > /app/data/env.sh
-
-source /app/data/env.sh
-
 # the --config-dir is deprecated and not used. but without it, minio will try to create $HOME/.minio :/ same for --certs-dir
 echo "==> Starting minio"
-exec /usr/local/bin/gosu cloudron:cloudron /app/code/minio --certs-dir /run/minio/certs --config-dir /run/minio/config --quiet ${CLOUDRON_MINIO_STARTUP_ARGS} --address :8000 
+exec /usr/local/bin/gosu cloudron:cloudron /app/code/minio --certs-dir /run/minio/certs --config-dir /run/minio/config --quiet ${CLOUDRON_MINIO_STARTUP_ARGS} --address :9000 --console-address :8000

--- a/test/package-lock.json
+++ b/test/package-lock.json
--- a/test/package.json
+++ b/test/package.json
@@ -9,9 +9,10 @@
  "author": "",
  "license": "ISC",
  "dependencies": {
-    "chromedriver": "^89.0.0",
+    "chromedriver": "^114.0.2",
    "expect.js": "^0.3.1",
-    "mocha": "^8.3.2",
-    "selenium-webdriver": "^3.6.0"
+    "mocha": "^10.2.0",
+    "selenium-webdriver": "^4.10.0",
+    "superagent": "^8.0.9"
  }
 }
--- a/test/test.js
+++ b/test/test.js
@@ -1,31 +1,34 @@
 #!/usr/bin/env node

+/* jshint esversion: 8 */
 /* global describe */
 /* global before */
 /* global after */
 /* global it */
+/* global xit */

 'use strict';

 require('chromedriver');

-var execSync = require('child_process').execSync,
+const execSync = require('child_process').execSync,
    expect = require('expect.js'),
+    fs = require('fs'),
    path = require('path'),
-    { Builder, By, Key, until } = require('selenium-webdriver'),
+    superagent = require('superagent'),
+    timers = require('timers/promises'),
+    { Builder, By, until } = require('selenium-webdriver'),
    { Options } = require('selenium-webdriver/chrome');

-
 describe('Application life cycle test', function () {
    this.timeout(0);

    const LOCATION = 'test';
-    const TEST_TIMEOUT = 10000;
-    const EXEC_ARGS = { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' };
+    const TEST_TIMEOUT = 30000;
    const BUCKET = 'cloudrontestbucket';
+    const EXEC_ARGS = { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' };

-    var app;
-    var browser;
+    let browser, app;

    before(function () {
        browser = new Builder().forBrowser('chrome').setChromeOptions(new Options().windowSize({ width: 1280, height: 1024 })).build();
@@ -35,132 +38,87 @@ describe('Application life cycle test', function () {
        browser.quit();
    });

+    async function waitForElement(elem) {
+        await browser.wait(until.elementLocated(elem), TEST_TIMEOUT);
+        await browser.wait(until.elementIsVisible(browser.findElement(elem)), TEST_TIMEOUT);
+    }
+
    function getAppInfo() {
        var inspect = JSON.parse(execSync('cloudron inspect'));
        app = inspect.apps.filter(function (a) { return a.location.indexOf(LOCATION) === 0; })[0];
        expect(app).to.be.an('object');
    }

-    function pageLoaded() {
-        return browser.wait(until.elementLocated(By.className('page-load pl-0 pl-1')), TEST_TIMEOUT);
+    async function login(accessKey='minioadmin', secretKey='minioadmin') {
+        await browser.get(`https://${app.fqdn}/login`);
+        await waitForElement(By.id('accessKey'));
+        await browser.findElement(By.id('accessKey')).sendKeys(accessKey);
+        await browser.findElement(By.id('secretKey')).sendKeys(secretKey);
+        await browser.findElement(By.xpath('//button[@id="do-login"]')).click();
+        await waitForElement(By.xpath('//span[contains(text(), "Buckets")]'));
+        await timers.setTimeout(5000);
    }

-    function visible(selector) {
-        return browser.wait(until.elementLocated(selector), TEST_TIMEOUT).then(function () {
-            return browser.wait(until.elementIsVisible(browser.findElement(selector)), TEST_TIMEOUT);
-        });
+    async function logout() {
+        await browser.get(`https://${app.fqdn}/`);
+        await waitForElement(By.xpath('//span[contains(text(), "Buckets")]'));
+        const button = await browser.findElement(By.xpath('//button[@id="sign-out"]'));
+        await browser.executeScript('arguments[0].scrollIntoView(false)', button);
+        await button.click();
+        await waitForElement(By.id('accessKey'));
    }

-    function login(accessKey, secretKey, callback) {
-        browser.manage().deleteAllCookies();
-        browser.get('https://' + app.fqdn).then(function () {
-            return visible(By.id('accessKey'));
-        }).then(function () {
-            return browser.findElement(By.id('accessKey')).sendKeys(accessKey);
-        }).then(function () {
-            return browser.findElement(By.id('secretKey')).sendKeys(secretKey);
-        }).then(function () {
-            // return browser.findElement(By.className('lw-btn')).click();
-            return browser.findElement(By.tagName('form')).submit();
-        }).then(function () {
-            return browser.wait(until.elementLocated(By.id('top-right-menu')), TEST_TIMEOUT);
-        }).then(function () {
-            callback();
-        });
+    async function addBucket() {
+        await browser.get(`https://${app.fqdn}/buckets`);
+        await waitForElement(By.xpath('//button[@id="create-bucket"]'));
+        await browser.findElement(By.xpath('//button[@id="create-bucket"]')).click();
+        await browser.sleep(2000);
+        await browser.findElement(By.xpath('//input[@id="bucket-name"]')).sendKeys(BUCKET);
+        await browser.findElement(By.xpath('//button[@id="create-bucket"]')).click();
+        await waitForElement(By.xpath(`//h1[contains(text(), "${BUCKET}")]`));
+        await timers.setTimeout(5000);
    }

-    function logout(callback) {
-        browser.get('https://' + app.fqdn);
-
-        pageLoaded().then(function () {
-            return visible(By.id('top-right-menu'));
-        }).then(function () {
-            return browser.findElement(By.id('top-right-menu')).click();
-        }).then(function () {
-            if (app.manifest.version === '1.137.0') {
-                return visible(By.xpath('//*[text()="Sign Out "]'));
-            } else {
-                return visible(By.xpath('//*[contains(text(), "Logout")]'));
-            }
-        }).then(function () {
-            if (app.manifest.version === '1.137.0') {
-                return browser.findElement(By.xpath('//*[text()="Sign Out "]')).click();
-            } else {
-                return browser.findElement(By.xpath('//*[contains(text(),"Logout")]')).click();
-            }
-        }).then(function () {
-            return browser.wait(until.elementLocated(By.id('accessKey')), TEST_TIMEOUT);
-        }).then(function () {
-            callback();
-        });
+    async function checkBucket() {
+        await browser.get(`https://${app.fqdn}/buckets`);
+        await waitForElement(By.xpath(`//h1[contains(text(), "${BUCKET}")]`));
    }

-    function addBucket(callback) {
-        browser.get('https://' + app.fqdn);
-
-        pageLoaded().then(function () {
-            return visible(By.className('fa-plus'));
-        }).then(function () {
-            return browser.findElement(By.className('fa-plus')).click();
-        }).then(function () {
-            const c = 'fa-hdd';
-            return visible(By.className(c));
-        }).then(function () {
-            const c = 'fa-hdd';
-            return browser.findElement(By.className(c)).click();
-        }).then(function () {
-            return visible(By.xpath('//*[@class="modal-body"]/form/div/input'));
-        }).then(function () {
-            return browser.findElement(By.xpath('//*[@class="modal-body"]/form/div/input')).sendKeys(BUCKET);
-        }).then(function () {
-            return browser.findElement(By.xpath('//*[@class="modal-body"]/form')).submit();
-        }).then(function () {
-            return visible(By.xpath('//*[@class="main"]/a[text()="' + BUCKET + '"]'));
-        }).then(function () {
-            callback();
-        });
+    async function checkRedirect() {
+        const response = await superagent.get(`https://${app.secondaryDomains[0].fqdn}`).set('User-Agent', 'Mozilla/5.0').redirects(0).ok(() => true);
+        expect(response.status).to.be(307);
+        expect(response.headers.location).to.be(`https://${app.fqdn}`);
    }

-    function checkBucket(callback) {
-        browser.get('https://' + app.fqdn);
-
-        pageLoaded().then(function () {
-            return browser.findElement(By.xpath(`//a[contains(text(), ${BUCKET})]`));
-        }).then(function () {
-            callback();
-        });
-    }
-
-    function openSettings(callback) {
-        browser.get('https://' + app.fqdn);
-
-        pageLoaded().then(function () {
-            return visible(By.id('top-right-menu'));
-        }).then(function () {
-            return browser.findElement(By.id('top-right-menu')).click();
-        }).then(function () {
-            return visible(By.xpath('//*[contains(text(), "Change Password")]'));
-        }).then(function () {
-            return browser.findElement(By.xpath('//*[contains(text(),"Change Password")]')).click();
-        }).then(function () {
-            return browser.wait(until.elementLocated(By.xpath('//*[contains(text(), "Change Password")]')), TEST_TIMEOUT);
-        }).then(function () {
-            callback();
-        });
+    async function checkApi() {
+        const response = await superagent.get(`https://${app.secondaryDomains[0].fqdn}`).ok(() => true);
+        expect(response.status).to.be(403);
+        expect(response.body.toString('utf8')).to.contain('<Code>AccessDenied</Code>');
    }

    xit('build app', function () { execSync('cloudron build', EXEC_ARGS); });
-    it('install app', function () { execSync('cloudron install --location ' + LOCATION, EXEC_ARGS); });
+    it('install app', async function () {
+        execSync(`cloudron install --location ${LOCATION} --secondary-domains API_SERVER_DOMAIN=${LOCATION}-api`, EXEC_ARGS);
+        await timers.setTimeout(10000);
+    });

    it('can get app information', getAppInfo);

    it('can login', login.bind(null, 'minioadmin', 'minioadmin'));
    it('can add bucket', addBucket);
-    it('can open settings', openSettings);
    it('can logout', logout);
+    it('does redirect', checkRedirect);
+    it('check api', checkApi);

-    it('can change credentials', function () {
-        execSync(`cloudron exec --app ${app.id} -- /app/code/minio-credentials set minioakey minioskey`, EXEC_ARGS);
+    it('can change credentials', async function () {
+        let data = fs.readFileSync(path.join(__dirname, '../env.sh'), 'utf8');
+        data = data
+            .replace(/MINIO_ROOT_USER=.*/, 'MINIO_ROOT_USER=minioakey')
+            .replace(/MINIO_ROOT_PASSWORD=.*/, 'MINIO_ROOT_PASSWORD=minioskey');
+        fs.writeFileSync('/tmp/env.sh', data);
+        execSync(`cloudron push --app ${app.id} /tmp/env.sh /app/data/env.sh`, EXEC_ARGS);
+        execSync(`cloudron restart --app ${app.id}`, EXEC_ARGS);
+        await timers.setTimeout(10000);
    });

    it('can restart app', function () { execSync(`cloudron restart --app ${app.id}`, EXEC_ARGS); });
@@ -168,30 +126,37 @@ describe('Application life cycle test', function () {
    it('can login', login.bind(null, 'minioakey', 'minioskey'));
    it('has bucket', checkBucket);
    it('can logout', logout);
+    it('does redirect', checkRedirect);
+    it('check api', checkApi);

    it('backup app', function () { execSync('cloudron backup create --app ' + app.id, EXEC_ARGS); });
-    it('restore app', function () {
+    it('restore app', async function () {
        const backups = JSON.parse(execSync(`cloudron backup list --raw --app ${app.id}`));
        execSync('cloudron uninstall --app ' + app.id, EXEC_ARGS);
        execSync('cloudron install --location ' + LOCATION, EXEC_ARGS);
        getAppInfo();
        execSync(`cloudron restore --backup ${backups[0].id} --app ${app.id}`, EXEC_ARGS);
+        await timers.setTimeout(10000);
    });

    it('can login', login.bind(null, 'minioakey', 'minioskey'));
    it('has bucket', checkBucket);
-    it('can open settings', openSettings);
    it('can logout', logout);
+    it('does redirect', checkRedirect);
+    it('check api', checkApi);

-    it('move to different location', function () {
+    it('move to different location', async function () {
        browser.manage().deleteAllCookies();
        execSync('cloudron configure --location ' + LOCATION + '2', EXEC_ARGS);
+        await timers.setTimeout(10000);
    });
    it('can get app information', getAppInfo);

    it('can login', login.bind(null, 'minioakey', 'minioskey'));
    it('has bucket', checkBucket);
    it('can logout', logout);
+    it('does redirect', checkRedirect);
+    it('check api', checkApi);

    it('uninstall app', function () { execSync('cloudron uninstall --app ' + app.id, EXEC_ARGS); });

@@ -202,12 +167,15 @@ describe('Application life cycle test', function () {
    it('can login', login.bind(null, 'minioadmin', 'minioadmin'));
    it('can add buckets', addBucket);
    it('can logout', logout);
-    it('can update', function () { execSync('cloudron update --app ' + LOCATION, EXEC_ARGS); });
+    it('can update', function () { execSync(`cloudron update --app ${LOCATION}`, EXEC_ARGS); });
+    it('can configure', function () { execSync(`cloudron configure --app ${LOCATION} --location ${LOCATION} --secondary-domains API_SERVER_DOMAIN=${LOCATION}-api`, EXEC_ARGS); });
    it('can get app information', getAppInfo);

    it('can login', login.bind(null, 'minioadmin', 'minioadmin'));
    it('has bucket', checkBucket);
    it('can logout', logout);
+    it('does redirect', checkRedirect);
+    it('check api', checkApi);

    it('uninstall app', function () { execSync('cloudron uninstall --app ' + app.id, EXEC_ARGS); });
 });